Privacy Policy
1. Who we are
Klōs ("Klōs", "we", "us", "our") is operated by KLOS INC., a corporation incorporated under the laws of Ontario, Canada, with its registered office at 310 Spadina Ave., Toronto, ON M5T 2E8.
Klōs is an introduction app. It helps people request and make warm introductions through their existing network. We are not a social network, an advertising business, or a data broker. We do not sell personal information, and we do not use your information to target advertising.
Questions about this policy, or about your personal information, can be sent to info@joinklos.com.
2. Who may use Klōs
Klōs is available only to individuals aged 18 or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete it and terminate the account. If you believe a minor is using Klōs, contact us at info@joinklos.com.
3. What we collect
We collect only what the service needs to function.
Information you give us
| Information | Examples | Why we collect it |
|---|---|---|
| Account information | Email address, name, username | To create and secure your account; to contact you about the service |
| Phone number | Your mobile number, verified by SMS at signup | To verify that you are a real person, to secure your account, to prevent duplicate accounts, and to let people who already have your number find you on Klōs |
| Profile information | Photo, role or title, city, biography | To let other members recognize and evaluate you |
| Signal information | What you are working on, what you are looking for, what you can offer | To match you with relevant people in your extended network |
| Content you post | Posts, comments, and other content shared in the app | To display your content to the people you share it with |
| Messages | Direct and group messages you send in the app | To deliver your messages |
| Invitations | Invite codes you create or redeem, and who accepted them | To operate the invite-based membership model |
| Guest contact details | The email address or mobile number you provide when you invite someone who is not yet a member, and a record of their consent | To deliver the invitation, and to retain proof of consent as required by Canadian anti-spam law |
| Support communications | Messages you send us, reports you file about other members | To respond to you and to enforce our Community Guidelines |
Information collected automatically
| Information | Examples | Why we collect it |
|---|---|---|
| Identifiers | A unique user ID assigned by us; a push notification token for your device | To operate your account and deliver notifications |
| Usage information | Actions taken in the app, such as connections formed, introductions requested and confirmed, and content viewed | To operate features, to improve matching, and to measure whether the product works |
| Diagnostic information | Crash reports, including the device model, operating system version, and the state of the app at the time of a crash | To find and fix defects |
What we do not collect
We do not collect precise or approximate device location. The city on your profile is a value you select yourself; the app does not access your device's location services. We do not collect health, financial, biometric, browsing history, or search history information. We do not track you across other companies' apps or websites, and we do not use the Advertising Identifier.
Finding members from your contacts
If you choose to use it, Klōs offers an optional feature that tells you which of your phone's contacts are already members. Your contacts are read on your device only, after you grant permission, and each number is converted on your device into an irreversible cryptographic hash. The numbers themselves are discarded immediately and are never transmitted to us. Only the hashes are sent. We compare them against the hashed numbers of existing members, return only the members who matched, and discard the hashes you sent. We do not store your contact list, your contacts' names or numbers, or any record of who is in your address book, and we do not tell you anything about contacts who are not members.
4. How we use your information
We use personal information to:
- create, secure, and operate your account;
- display your profile, content, and signals to other members as described in Section 5;
- generate introduction suggestions by comparing your signals with those of people in your extended network;
- identify which of your contacts are already members, when you choose to use that feature, as described in Section 3;
- deliver messages, notifications, and transactional emails;
- operate the invitation system;
- detect, investigate, and act on violations of our Terms of Service and Community Guidelines, including reports made by other members;
- measure how the product is used in aggregate, so we can improve it;
- diagnose crashes and defects; and
- comply with legal obligations.
We do not use your personal information to serve advertising, and we do not sell or rent it.
5. Who can see your information
Other members. Your name, username, photo, role, city, biography, signals, and posts are visible to other Klōs members according to the app's design. Because Klōs works through degrees of separation, members connected to you may see your profile, and members two degrees away may be shown your profile as a suggested introduction, together with the name of the mutual connection who can introduce you. Your messages are visible only to the people in that conversation.
Service providers. We use a small number of providers to run the service. They process personal information only on our instructions and only for the purposes described.
| Provider | What they process | Where |
|---|---|---|
| Google LLC (Firebase) | Authentication, database, file storage, cloud functions, push notifications, crash reporting | United States |
| Twilio Inc. (SendGrid) | Transactional and notification emails | United States |
| OpenAI, L.L.C. | The text of your signals and of the posts you publish, processed to generate the numerical representations used for matching. This text is sent for processing only; it is not used to train OpenAI's models under our API terms. | United States |
Legal and safety. We may disclose personal information if we believe in good faith that disclosure is required by law, or is reasonably necessary to protect the safety of any person, to investigate fraud, or to enforce our terms.
Business transfers. If KLOS INC. is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. We will give notice before your information becomes subject to a materially different privacy policy.
6. International transfers
We are based in Canada, and our service providers listed above process personal information in the United States. This means your information may be accessible to foreign governments, courts, and law enforcement under the laws of those jurisdictions. By using Klōs, you acknowledge this transfer. We take contractual and technical steps to protect information handled by our providers.
7. How long we keep information
We keep your personal information while your account is active. When you delete your account we delete your profile, content, signals, and uploaded media — including photos and voice notes you sent in conversations — and we delete your authentication record, so you can no longer sign in. Messages you sent in shared conversations are emptied of their content rather than removed, so that the conversation remains readable for the other participants.
Some information persists after deletion:
- Records that we are required to keep by law, or that are necessary to resolve disputes or enforce our agreements.
- Records of email unsubscribe requests. Canadian anti-spam law requires us to honour an unsubscribe indefinitely, which means we keep a permanent record that a given address has opted out. This record exists so that we do not contact you again.
- Copies in routine backups, which are overwritten on a rolling basis.
- Crash diagnostic data held by our provider, which ages out on that provider's retention schedule and cannot be deleted per-user.
- Messages you sent in shared conversations, retained in emptied form as described above.
- De-identified activity records. We keep a log of product events — for example, that an introduction was requested or confirmed — to measure whether the service works. When you delete your account your identifier is permanently removed from these records. The records themselves are kept, and may still identify the other people involved in the same event.
8. Your choices and rights
Access and correction. You can view and edit most of your information directly in the app. For anything you cannot change yourself, contact info@joinklos.com.
Deletion. You can delete your account at any time from Settings in the app. This is permanent.
Notifications. You can turn off push notifications in your device settings. You can unsubscribe from non-essential emails using the link in those emails. We will still send you essential messages about your account and the service.
Withdrawing consent. You may withdraw your consent to our processing of your personal information, subject to legal and contractual restrictions and reasonable notice. Withdrawing consent may mean we can no longer provide the service, in which case the practical result is account deletion.
Under Canadian federal and Ontario privacy law you have the right to access your personal information, to ask us to correct it, and to complain about our handling of it. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
If you are in the European Economic Area or the United Kingdom, you may also have rights to portability, restriction of processing, objection, and erasure. Contact us at info@joinklos.com and we will respond as required by applicable law.
9. Security
We protect personal information with access controls at the database level, encryption in transit, authenticated access to all member data, and device attestation technology employed to help identify unauthorized clients. No system is perfectly secure. We cannot guarantee that unauthorized access will never occur, and you share information at your own risk.
If a breach of security safeguards creates a real risk of significant harm, we will notify affected individuals and the Privacy Commissioner of Canada as required by law.
10. Children
Klōs is not directed to children. We do not knowingly collect personal information from anyone under 18. See Section 2.
11. Changes to this policy
We may update this policy. If we make a material change, we will notify you in the app or by email before the change takes effect, and we will update the "last updated" date above. Continuing to use Klōs after a change means you accept the updated policy.
12. Contact
KLOS INC.
310 Spadina Ave., Toronto, ON M5T 2E8
info@joinklos.com